]> granicus.if.org Git - postgresql/commit
Fix contrib/sepgsql test policy to work with latest SELinux releases.
authorTom Lane <tgl@sss.pgh.pa.us>
Thu, 25 Jul 2019 15:02:43 +0000 (11:02 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Thu, 25 Jul 2019 15:03:37 +0000 (11:03 -0400)
commit0e259d4bc78956c173c9a81c03713e17b6513738
tree2da5b4b4c77e8eff4e6f5ac64af5542d167bd1c7
parent19f9a5aed9a734ca0904df039c777bba569e0d2c
Fix contrib/sepgsql test policy to work with latest SELinux releases.

As of Fedora 30, it seems that the system-provided macros for setting
up user privileges in SELinux policies don't grant the ability to read
/etc/passwd, as they formerly did.  This restriction breaks psql
(which tries to use getpwuid() to obtain the user name it's running
under) and thereby the contrib/sepgsql regression test.  Add explicit
specifications that we need the right to read /etc/passwd.

Mike Palmiotto, per a report from me.  Back-patch to all supported
branches.

Discussion: https://postgr.es/m/23856.1563381159@sss.pgh.pa.us
contrib/sepgsql/sepgsql-regtest.te